Trusted system: password policy

[j773303]

I set the /etc/default/security
PASSWORD_HISTORY_DEPTH=3

When user executes the passwd command, this file is checked to verify that the user's newly chosen password hasn't been used 3 times previously. Is it possbile only to set for some use has this function, and the other user can change password for any word. Thanks.

[Sridhar Bhaskarla · Accepted solution]

Hi,

This is a system wide file. So rules in this file will be applicable to all the users.

-Sri

[D Block 2]

dude, do a search on TRUSTED in this forum. this might help.

also, check out link:

http://docs.hp.com
and do a search on TRUSTED

good luck,
Tom

[Bill Hassell]

The man page for security gives you the details. All of the items in /etc/default/security are global and apply to all users.

[D Block 2]

Bill, its great to see you again on this forum.. I do hope j773303 gives you the POINTs ..

best wishes..

[j773303]

Hi Bill,
Which command can view the details?
man ??? Thanks.

[Michael Tully]

The man page is:

# man 4 security

[Muthukumar_5]

Passwd history change is based on global users. It will get effect on trusted mode only.

Passwd change on getting expiration will check the old history of passwd's maintained as encrypted one.

As we knew we can not read the passwd information ( without abnormal hack ) there. I hope no system commmands to view passwd history changes there.

passwd history setting informations are enabled in secutiry file. history policy detailed in passwd.1 man page.

[Bharat Katkar]

HI,
See the doc attached on Trusted Systems.
Thought it would help.
Regards,

[Bill Hassell]

The man page for security (man security) is complete only when you have the latest security patches. It was completely missing in 11.00 for a long time (even though many of the directives were active). If you don't have an 11i system with the latest security patches, you can read the man page at http://docs.hp.com. I've attached a heavily commented security file that will help. Note that the majority of directives apply only to Trusted systems and that spelling is imperative. There is *NO* feedback when a spelling error occurs...the directive simply does nothing.

I would strongly recommend downloading the security patch checker so you can not only get up to date but also view the integrity of all your pacthes.